WPCOM Member

Explore WPCOM Member vulnerabilities across all versions. Currently tracking 8 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSHigh

8.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPCOM Member vulnerabilities before they are exploited.

Vulnerability Records

8 records


2025-12-15 00:00	WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP WPCOM Member <= 1.7.16	`CVE-2025-14002`	8.1 High	wesley (wcraft)	Yes
2025-10-31 13:35	WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode WPCOM Member <= 1.7.14	`CVE-2025-11920`	8.8 High	Naoya Takahashi (nakko)	Yes
2025-04-16 00:00	WPCOM Member <= 1.7.7 - Authenticated (Contributor+) Local File Inclusion WPCOM Member <= 1.7.7	`CVE-2025-39570`	8.8 High	astra.r3verii	Yes
2025-03-13 00:00	WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection WPCOM Member <= 1.7.6	`CVE-2025-2221`	7.5 High	wesley (wcraft)	Yes
2025-03-06 00:00	WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone' WPCOM Member <= 1.7.5	`CVE-2025-1475`	9.8 Critical	wesley (wcraft)	Yes
2024-09-30 00:00	WPCOM Member <= 1.5.4 - Reflected Cross-Site Scripting WPCOM Member <= 1.5.4	`CVE-2024-47378`	6.1 Medium	ardias	Yes
2024-09-06 01:15	WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta WPCOM Member <= 1.5.2.1	`CVE-2024-7493`	9.8 Critical	wesley (wcraft)	Yes
2024-06-24 00:00	Several WordPress.org Plugins <= Various Versions - Injected Backdoor WPCOM Member 1.3.15 – 1.3.16 · 2 branches	`CVE-2024-6297`	10.0 Critical	Anonymous	Yes

Showing 1–8 of 8 reports

Plugin Profile

Latestv1.7.27

WPCOM Member

Author

Lomu

0.0(0)

0/100

Last Updated

2026-07-26 (3d ago)

Active Installs

1,000+

Downloads

73,040

Requires WP

6.2+

Requires PHP

7.4+

Tested up to

WP 7.0.2

Created

2022-07-26 (4y ago)

WordPress用户中心插件 / User profile & membership plugin for WordPress WPCOM用户中心插件使用说明设置入口：后台用户中心插件使用可以参考（部分功能为高级版或主题内置，免费版会有区别）：https://www.wpcom.cn/docs/themer/member.html 支持功能前端注册、登录、找回密码页面，注册登录弹框；前端帐号设置页面，可支持个人资料设置、修改密码、头像设置等；前端个人中心页面；社交登录：微信、微博、QQ、Google、Facebook、Twitter、Github; 注册登录表单人机验证：集成WPCOM内置人机验证（免费）、阿里云云盾验证码、腾讯云验证码/防水墙、hCaptcha和Google reCAPTCHA安全验证方式；注册邮箱验证；用户黑名单功能； WooCommerce兼容；用户中心高级版高级版购买地址：https://www.wpcom.cn/plugins/wpcom-member-pro.html 高级版功能：内置订单支付系统，可支持微信支付、支付宝以及虎皮椒支付接口；会员订阅功能；我的钱包功能，可实现余额支付；积分功能；卡密销售功能；代金券充值功能；付费查看内容、付费阅读全文；付费下载内容；付费复制功能；邀请码注册功能；推荐佣金功能；用户私信功能；用户关注功能；系统通知功能；用户分组功能；手机号注册登录功能；扫码登录功能、微信扫码关注公众号登录；

View on WordPress.org